@webpieces/code-rules 0.4.691 → 0.4.693

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/code-rules",
-  "version": "0.4.691",
+  "version": "0.4.693",
   "description": "Standalone code validation rules extracted from architecture-validators, no Nx dependency required",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -16,7 +16,7 @@
     "directory": "packages/tooling/code-rules"
   },
   "dependencies": {
-    "@webpieces/rules-config": "0.4.691",
+    "@webpieces/rules-config": "0.4.693",
     "@inversifyjs/binding-decorators": "1.1.5",
     "inversify": "7.10.4",
     "reflect-metadata": "0.2.2"

package/src/code-rules-config-table.js

@@ -24,6 +24,7 @@ exports.CONFIG_BINDINGS = [
     [rules_config_1.NoSymbolDiTokensConfig, 'no-symbol-di-tokens'],
     [rules_config_1.NoClientCreationOutsideServerOrClientConfig, 'no-client-creation-outside-server-or-client'],
     [rules_config_1.NoCustomCssConfig, 'no-custom-css'],
+    [rules_config_1.NoStatePathsInTemplatesConfig, 'no-state-paths-in-templates'],
     [rules_config_1.NoProcessExitOutsideMainConfig, 'no-process-exit-outside-main'],
     [rules_config_1.NoFunctionOutsideClassConfig, 'no-function-outside-class'],
     [rules_config_1.InjectAnnotationNotNeededForConcreteClassConfig, 'inject-annotation-not-needed-for-concrete-class'],

package/src/code-rules-config-table.js.map

@@ -1 +1 @@
-{"version":3,"file":"code-rules-config-table.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/code-rules-config-table.ts"],"names":[],"mappings":";;;AAAA,0DAuBiC;AAKjC;;;;;GAKG;AACU,QAAA,eAAe,GAAqE;IAC7F,CAAC,mCAAoB,EAAE,kBAAkB,CAAC;IAC1C,CAAC,iCAAkB,EAAE,gBAAgB,CAAC;IACtC,CAAC,sCAAuB,EAAE,qBAAqB,CAAC;IAChD,CAAC,yCAA0B,EAAE,yBAAyB,CAAC;IACvD,CAAC,iCAAkB,EAAE,gBAAgB,CAAC;IACtC,CAAC,kCAAmB,EAAE,iBAAiB,CAAC;IACxC,CAAC,uCAAwB,EAAE,sBAAsB,CAAC;IAClD,CAAC,oCAAqB,EAAE,kBAAkB,CAAC;IAC3C,CAAC,kCAAmB,EAAE,gBAAgB,CAAC;IACvC,CAAC,sCAAuB,EAAE,qBAAqB,CAAC;IAChD,CAAC,0CAA2B,EAAE,yBAAyB,CAAC;IACxD,CAAC,iDAAkC,EAAE,mCAAmC,CAAC;IACzE,CAAC,qCAAsB,EAAE,qBAAqB,CAAC;IAC/C,CAAC,0DAA2C,EAAE,6CAA6C,CAAC;IAC5F,CAAC,gCAAiB,EAAE,eAAe,CAAC;IACpC,CAAC,6CAA8B,EAAE,8BAA8B,CAAC;IAChE,CAAC,2CAA4B,EAAE,2BAA2B,CAAC;IAC3D,CAAC,8DAA+C,EAAE,iDAAiD,CAAC;IACpG,CAAC,iCAAkB,EAAE,eAAe,CAAC;IACrC,CAAC,4BAAa,EAAE,UAAU,CAAC;CAC9B,CAAC","sourcesContent":["import {\n    BaseRuleConfig,\n    WebpiecesRulesConfig,\n    MaxMethodLinesConfig,\n    MaxFileLinesConfig,\n    RequireReturnTypeConfig,\n    NoInlineTypeLiteralsConfig,\n    NoAnyUnknownConfig,\n    NoImplicitAnyConfig,\n    PrismaValidateDtosConfig,\n    PrismaConverterConfig,\n    NoDestructureConfig,\n    CatchErrorPatternConfig,\n    NoUnmanagedExceptionsConfig,\n    AngularNoDirectApiInResolverConfig,\n    NoSymbolDiTokensConfig,\n    NoClientCreationOutsideServerOrClientConfig,\n    NoCustomCssConfig,\n    NoProcessExitOutsideMainConfig,\n    NoFunctionOutsideClassConfig,\n    InjectAnnotationNotNeededForConcreteClassConfig,\n    FrameworkTagConfig,\n    RoleTagConfig,\n} from '@webpieces/rules-config';\n\n/** A rule config class usable as an inversify inject-by-type token. */\nexport type ConfigCtor = new () => BaseRuleConfig;\n\n/**\n * The 1:1 table of `[config class, webpieces.config.json rule key]`. The composition root iterates it\n * to bind each rule's config into the container (`bind(ConfigClass).toConstantValue(config[key] ??\n * new ConfigClass())`), so every `@provideSingleton` validator injects its config by type. Data only\n * — the binding loop lives inline in the bin (an inline loop, exempt from no-function-outside-class).\n */\nexport const CONFIG_BINDINGS: ReadonlyArray<readonly [ConfigCtor, keyof WebpiecesRulesConfig]> = [\n    [MaxMethodLinesConfig, 'max-method-lines'],\n    [MaxFileLinesConfig, 'max-file-lines'],\n    [RequireReturnTypeConfig, 'require-return-type'],\n    [NoInlineTypeLiteralsConfig, 'no-inline-type-literals'],\n    [NoAnyUnknownConfig, 'no-any-unknown'],\n    [NoImplicitAnyConfig, 'no-implicit-any'],\n    [PrismaValidateDtosConfig, 'prisma-validate-dtos'],\n    [PrismaConverterConfig, 'prisma-converter'],\n    [NoDestructureConfig, 'no-destructure'],\n    [CatchErrorPatternConfig, 'catch-error-pattern'],\n    [NoUnmanagedExceptionsConfig, 'no-unmanaged-exceptions'],\n    [AngularNoDirectApiInResolverConfig, 'angular-no-direct-api-in-resolver'],\n    [NoSymbolDiTokensConfig, 'no-symbol-di-tokens'],\n    [NoClientCreationOutsideServerOrClientConfig, 'no-client-creation-outside-server-or-client'],\n    [NoCustomCssConfig, 'no-custom-css'],\n    [NoProcessExitOutsideMainConfig, 'no-process-exit-outside-main'],\n    [NoFunctionOutsideClassConfig, 'no-function-outside-class'],\n    [InjectAnnotationNotNeededForConcreteClassConfig, 'inject-annotation-not-needed-for-concrete-class'],\n    [FrameworkTagConfig, 'framework-tag'],\n    [RoleTagConfig, 'role-tag'],\n];\n"]}
+{"version":3,"file":"code-rules-config-table.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/code-rules-config-table.ts"],"names":[],"mappings":";;;AAAA,0DAwBiC;AAKjC;;;;;GAKG;AACU,QAAA,eAAe,GAAqE;IAC7F,CAAC,mCAAoB,EAAE,kBAAkB,CAAC;IAC1C,CAAC,iCAAkB,EAAE,gBAAgB,CAAC;IACtC,CAAC,sCAAuB,EAAE,qBAAqB,CAAC;IAChD,CAAC,yCAA0B,EAAE,yBAAyB,CAAC;IACvD,CAAC,iCAAkB,EAAE,gBAAgB,CAAC;IACtC,CAAC,kCAAmB,EAAE,iBAAiB,CAAC;IACxC,CAAC,uCAAwB,EAAE,sBAAsB,CAAC;IAClD,CAAC,oCAAqB,EAAE,kBAAkB,CAAC;IAC3C,CAAC,kCAAmB,EAAE,gBAAgB,CAAC;IACvC,CAAC,sCAAuB,EAAE,qBAAqB,CAAC;IAChD,CAAC,0CAA2B,EAAE,yBAAyB,CAAC;IACxD,CAAC,iDAAkC,EAAE,mCAAmC,CAAC;IACzE,CAAC,qCAAsB,EAAE,qBAAqB,CAAC;IAC/C,CAAC,0DAA2C,EAAE,6CAA6C,CAAC;IAC5F,CAAC,gCAAiB,EAAE,eAAe,CAAC;IACpC,CAAC,4CAA6B,EAAE,6BAA6B,CAAC;IAC9D,CAAC,6CAA8B,EAAE,8BAA8B,CAAC;IAChE,CAAC,2CAA4B,EAAE,2BAA2B,CAAC;IAC3D,CAAC,8DAA+C,EAAE,iDAAiD,CAAC;IACpG,CAAC,iCAAkB,EAAE,eAAe,CAAC;IACrC,CAAC,4BAAa,EAAE,UAAU,CAAC;CAC9B,CAAC","sourcesContent":["import {\n    BaseRuleConfig,\n    WebpiecesRulesConfig,\n    MaxMethodLinesConfig,\n    MaxFileLinesConfig,\n    RequireReturnTypeConfig,\n    NoInlineTypeLiteralsConfig,\n    NoAnyUnknownConfig,\n    NoImplicitAnyConfig,\n    PrismaValidateDtosConfig,\n    PrismaConverterConfig,\n    NoDestructureConfig,\n    CatchErrorPatternConfig,\n    NoUnmanagedExceptionsConfig,\n    AngularNoDirectApiInResolverConfig,\n    NoSymbolDiTokensConfig,\n    NoClientCreationOutsideServerOrClientConfig,\n    NoCustomCssConfig,\n    NoStatePathsInTemplatesConfig,\n    NoProcessExitOutsideMainConfig,\n    NoFunctionOutsideClassConfig,\n    InjectAnnotationNotNeededForConcreteClassConfig,\n    FrameworkTagConfig,\n    RoleTagConfig,\n} from '@webpieces/rules-config';\n\n/** A rule config class usable as an inversify inject-by-type token. */\nexport type ConfigCtor = new () => BaseRuleConfig;\n\n/**\n * The 1:1 table of `[config class, webpieces.config.json rule key]`. The composition root iterates it\n * to bind each rule's config into the container (`bind(ConfigClass).toConstantValue(config[key] ??\n * new ConfigClass())`), so every `@provideSingleton` validator injects its config by type. Data only\n * — the binding loop lives inline in the bin (an inline loop, exempt from no-function-outside-class).\n */\nexport const CONFIG_BINDINGS: ReadonlyArray<readonly [ConfigCtor, keyof WebpiecesRulesConfig]> = [\n    [MaxMethodLinesConfig, 'max-method-lines'],\n    [MaxFileLinesConfig, 'max-file-lines'],\n    [RequireReturnTypeConfig, 'require-return-type'],\n    [NoInlineTypeLiteralsConfig, 'no-inline-type-literals'],\n    [NoAnyUnknownConfig, 'no-any-unknown'],\n    [NoImplicitAnyConfig, 'no-implicit-any'],\n    [PrismaValidateDtosConfig, 'prisma-validate-dtos'],\n    [PrismaConverterConfig, 'prisma-converter'],\n    [NoDestructureConfig, 'no-destructure'],\n    [CatchErrorPatternConfig, 'catch-error-pattern'],\n    [NoUnmanagedExceptionsConfig, 'no-unmanaged-exceptions'],\n    [AngularNoDirectApiInResolverConfig, 'angular-no-direct-api-in-resolver'],\n    [NoSymbolDiTokensConfig, 'no-symbol-di-tokens'],\n    [NoClientCreationOutsideServerOrClientConfig, 'no-client-creation-outside-server-or-client'],\n    [NoCustomCssConfig, 'no-custom-css'],\n    [NoStatePathsInTemplatesConfig, 'no-state-paths-in-templates'],\n    [NoProcessExitOutsideMainConfig, 'no-process-exit-outside-main'],\n    [NoFunctionOutsideClassConfig, 'no-function-outside-class'],\n    [InjectAnnotationNotNeededForConcreteClassConfig, 'inject-annotation-not-needed-for-concrete-class'],\n    [FrameworkTagConfig, 'framework-tag'],\n    [RoleTagConfig, 'role-tag'],\n];\n"]}

package/src/code-rules-engine.d.ts

@@ -17,6 +17,7 @@ import { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver'
 import { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';
 import { NoClientCreationOutsideServerOrClientValidator } from './validate-no-client-creation-outside-server-or-client';
 import { NoCustomCssValidator } from './validate-no-custom-css';
+import { NoStatePathsInTemplatesValidator } from './validate-no-state-paths-in-templates';
 import { NoProcessExitOutsideMainValidator } from './validate-no-process-exit-outside-main';
 import { NoFunctionOutsideClassValidator } from './validate-no-function-outside-class';
 import { InjectAnnotationNotNeededForConcreteClassValidator } from './validate-inject-annotation-not-needed-for-concrete-class';
@@ -48,13 +49,14 @@ export declare class CodeRulesEngine {
     private readonly noSymbolDiTokens;
     private readonly noClientCreationOutsideServerOrClient;
     private readonly noCustomCss;
+    private readonly noStatePathsInTemplates;
     private readonly noProcessExitOutsideMain;
     private readonly noFunctionOutsideClass;
     private readonly injectAnnotationNotNeeded;
     private readonly frameworkTag;
     private readonly roleTag;
-    constructor(workspace: WorkspaceRoot, reporter: RuleReporter, matchRules: MatchRulesHolder, matchChecker: MatchRulesChecker, maxMethodLines: MaxMethodLinesValidator, maxFileLines: MaxFileLinesValidator, requireReturnType: RequireReturnTypeValidator, noInlineTypeLiterals: NoInlineTypeLiteralsValidator, noAnyUnknown: NoAnyUnknownValidator, noImplicitAny: NoImplicitAnyValidator, prismaValidateDtos: PrismaValidateDtosValidator, prismaConverter: PrismaConverterValidator, noDestructure: NoDestructureValidator, catchErrorPattern: CatchErrorPatternValidator, noUnmanagedExceptions: NoUnmanagedExceptionsValidator, noDirectApiResolver: NoDirectApiResolverValidator, noSymbolDiTokens: NoSymbolDiTokensValidator, noClientCreationOutsideServerOrClient: NoClientCreationOutsideServerOrClientValidator, noCustomCss: NoCustomCssValidator, noProcessExitOutsideMain: NoProcessExitOutsideMainValidator, noFunctionOutsideClass: NoFunctionOutsideClassValidator, injectAnnotationNotNeeded: InjectAnnotationNotNeededForConcreteClassValidator, frameworkTag: FrameworkTagValidator, roleTag: RoleTagValidator);
-    /** The 20 injected built-in validators, in run order. */
+    constructor(workspace: WorkspaceRoot, reporter: RuleReporter, matchRules: MatchRulesHolder, matchChecker: MatchRulesChecker, maxMethodLines: MaxMethodLinesValidator, maxFileLines: MaxFileLinesValidator, requireReturnType: RequireReturnTypeValidator, noInlineTypeLiterals: NoInlineTypeLiteralsValidator, noAnyUnknown: NoAnyUnknownValidator, noImplicitAny: NoImplicitAnyValidator, prismaValidateDtos: PrismaValidateDtosValidator, prismaConverter: PrismaConverterValidator, noDestructure: NoDestructureValidator, catchErrorPattern: CatchErrorPatternValidator, noUnmanagedExceptions: NoUnmanagedExceptionsValidator, noDirectApiResolver: NoDirectApiResolverValidator, noSymbolDiTokens: NoSymbolDiTokensValidator, noClientCreationOutsideServerOrClient: NoClientCreationOutsideServerOrClientValidator, noCustomCss: NoCustomCssValidator, noStatePathsInTemplates: NoStatePathsInTemplatesValidator, noProcessExitOutsideMain: NoProcessExitOutsideMainValidator, noFunctionOutsideClass: NoFunctionOutsideClassValidator, injectAnnotationNotNeeded: InjectAnnotationNotNeededForConcreteClassValidator, frameworkTag: FrameworkTagValidator, roleTag: RoleTagValidator);
+    /** The 21 injected built-in validators, in run order. */
     private builtIns;
     /**
      * Every ACTIVE run: an injected built-in validator whose `shouldRun()` is true, or an injected

package/src/code-rules-engine.js

@@ -22,6 +22,7 @@ const validate_no_direct_api_resolver_1 = require("./validate-no-direct-api-reso
 const validate_no_symbol_di_tokens_1 = require("./validate-no-symbol-di-tokens");
 const validate_no_client_creation_outside_server_or_client_1 = require("./validate-no-client-creation-outside-server-or-client");
 const validate_no_custom_css_1 = require("./validate-no-custom-css");
+const validate_no_state_paths_in_templates_1 = require("./validate-no-state-paths-in-templates");
 const validate_no_process_exit_outside_main_1 = require("./validate-no-process-exit-outside-main");
 const validate_no_function_outside_class_1 = require("./validate-no-function-outside-class");
 const validate_inject_annotation_not_needed_for_concrete_class_1 = require("./validate-inject-annotation-not-needed-for-concrete-class");
@@ -53,13 +54,14 @@ let CodeRulesEngine = class CodeRulesEngine {
     noSymbolDiTokens;
     noClientCreationOutsideServerOrClient;
     noCustomCss;
+    noStatePathsInTemplates;
     noProcessExitOutsideMain;
     noFunctionOutsideClass;
     injectAnnotationNotNeeded;
     frameworkTag;
     roleTag;
     // webpieces-disable max-lines-new-methods -- the built-in validator set is flat; each is one injected field
-    constructor(workspace, reporter, matchRules, matchChecker, maxMethodLines, maxFileLines, requireReturnType, noInlineTypeLiterals, noAnyUnknown, noImplicitAny, prismaValidateDtos, prismaConverter, noDestructure, catchErrorPattern, noUnmanagedExceptions, noDirectApiResolver, noSymbolDiTokens, noClientCreationOutsideServerOrClient, noCustomCss, noProcessExitOutsideMain, noFunctionOutsideClass, injectAnnotationNotNeeded, frameworkTag, roleTag) {
+    constructor(workspace, reporter, matchRules, matchChecker, maxMethodLines, maxFileLines, requireReturnType, noInlineTypeLiterals, noAnyUnknown, noImplicitAny, prismaValidateDtos, prismaConverter, noDestructure, catchErrorPattern, noUnmanagedExceptions, noDirectApiResolver, noSymbolDiTokens, noClientCreationOutsideServerOrClient, noCustomCss, noStatePathsInTemplates, noProcessExitOutsideMain, noFunctionOutsideClass, injectAnnotationNotNeeded, frameworkTag, roleTag) {
         this.workspace = workspace;
         this.reporter = reporter;
         this.matchRules = matchRules;
@@ -79,19 +81,21 @@ let CodeRulesEngine = class CodeRulesEngine {
         this.noSymbolDiTokens = noSymbolDiTokens;
         this.noClientCreationOutsideServerOrClient = noClientCreationOutsideServerOrClient;
         this.noCustomCss = noCustomCss;
+        this.noStatePathsInTemplates = noStatePathsInTemplates;
         this.noProcessExitOutsideMain = noProcessExitOutsideMain;
         this.noFunctionOutsideClass = noFunctionOutsideClass;
         this.injectAnnotationNotNeeded = injectAnnotationNotNeeded;
         this.frameworkTag = frameworkTag;
         this.roleTag = roleTag;
     }
-    /** The 20 injected built-in validators, in run order. */
+    /** The 21 injected built-in validators, in run order. */
     builtIns() {
         return [
             this.maxMethodLines, this.maxFileLines, this.requireReturnType, this.noInlineTypeLiterals,
             this.noAnyUnknown, this.noImplicitAny, this.prismaValidateDtos, this.prismaConverter,
             this.noDestructure, this.catchErrorPattern, this.noUnmanagedExceptions, this.noDirectApiResolver,
             this.noSymbolDiTokens, this.noClientCreationOutsideServerOrClient, this.noCustomCss,
+            this.noStatePathsInTemplates,
             this.noProcessExitOutsideMain, this.noFunctionOutsideClass,
             this.injectAnnotationNotNeeded, this.frameworkTag, this.roleTag,
         ];
@@ -154,6 +158,7 @@ exports.CodeRulesEngine = CodeRulesEngine = tslib_1.__decorate([
         validate_no_symbol_di_tokens_1.NoSymbolDiTokensValidator,
         validate_no_client_creation_outside_server_or_client_1.NoClientCreationOutsideServerOrClientValidator,
         validate_no_custom_css_1.NoCustomCssValidator,
+        validate_no_state_paths_in_templates_1.NoStatePathsInTemplatesValidator,
         validate_no_process_exit_outside_main_1.NoProcessExitOutsideMainValidator,
         validate_no_function_outside_class_1.NoFunctionOutsideClassValidator,
         validate_inject_annotation_not_needed_for_concrete_class_1.InjectAnnotationNotNeededForConcreteClassValidator,

package/src/code-rules-engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"code-rules-engine.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/code-rules-engine.ts"],"names":[],"mappings":";;;;AACA,yCAA2D;AAE3D,qDAA0E;AAC1E,mDAA+C;AAC/C,6DAAuE;AACvE,iEAA2D;AAC3D,2EAAsE;AACtE,uEAAkE;AAClE,mEAAqE;AACrE,yEAA2E;AAC3E,uEAAkE;AAClE,yEAAoE;AACpE,mDAA8D;AAC9D,6EAAwE;AACxE,uEAAmE;AACnE,iFAA4E;AAC5E,yFAAoF;AACpF,uFAAiF;AACjF,iFAA2E;AAC3E,iIAAwH;AACxH,qEAAgE;AAChE,mGAA4F;AAC5F,6FAAuF;AACvF,yIAAgI;AAChI,qEAAiE;AACjE,2DAAuD;AAEvD;;;;;GAKG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAe;IAGH;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAzBrB,4GAA4G;IAC5G,YACqB,SAAwB,EACxB,QAAsB,EACtB,UAA4B,EAC5B,YAA+B,EAC/B,cAAuC,EACvC,YAAmC,EACnC,iBAA6C,EAC7C,oBAAmD,EACnD,YAAmC,EACnC,aAAqC,EACrC,kBAA+C,EAC/C,eAAyC,EACzC,aAAqC,EACrC,iBAA6C,EAC7C,qBAAqD,EACrD,mBAAiD,EACjD,gBAA2C,EAC3C,qCAAqF,EACrF,WAAiC,EACjC,wBAA2D,EAC3D,sBAAuD,EACvD,yBAA6E,EAC7E,YAAmC,EACnC,OAAyB;QAvBzB,cAAS,GAAT,SAAS,CAAe;QACxB,aAAQ,GAAR,QAAQ,CAAc;QACtB,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAmB;QAC/B,mBAAc,GAAd,cAAc,CAAyB;QACvC,iBAAY,GAAZ,YAAY,CAAuB;QACnC,sBAAiB,GAAjB,iBAAiB,CAA4B;QAC7C,yBAAoB,GAApB,oBAAoB,CAA+B;QACnD,iBAAY,GAAZ,YAAY,CAAuB;QACnC,kBAAa,GAAb,aAAa,CAAwB;QACrC,uBAAkB,GAAlB,kBAAkB,CAA6B;QAC/C,oBAAe,GAAf,eAAe,CAA0B;QACzC,kBAAa,GAAb,aAAa,CAAwB;QACrC,sBAAiB,GAAjB,iBAAiB,CAA4B;QAC7C,0BAAqB,GAArB,qBAAqB,CAAgC;QACrD,wBAAmB,GAAnB,mBAAmB,CAA8B;QACjD,qBAAgB,GAAhB,gBAAgB,CAA2B;QAC3C,0CAAqC,GAArC,qCAAqC,CAAgD;QACrF,gBAAW,GAAX,WAAW,CAAsB;QACjC,6BAAwB,GAAxB,wBAAwB,CAAmC;QAC3D,2BAAsB,GAAtB,sBAAsB,CAAiC;QACvD,8BAAyB,GAAzB,yBAAyB,CAAoD;QAC7E,iBAAY,GAAZ,YAAY,CAAuB;QACnC,YAAO,GAAP,OAAO,CAAkB;IAC3C,CAAC;IAEJ,yDAAyD;IACjD,QAAQ;QACZ,OAAO;YACH,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB;YACzF,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,eAAe;YACpF,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,mBAAmB;YAChG,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,qCAAqC,EAAE,IAAI,CAAC,WAAW;YACnF,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,sBAAsB;YAC1D,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO;SAClE,CAAC;IACN,CAAC;IAED;;;;OAIG;IACK,UAAU,CAAC,IAAY;QAC3B,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,SAAS,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAO,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAO,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACzH,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;QACzG,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AA7EY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAIL,kCAAa;QACd,4BAAY;QACV,qCAAgB;QACd,wCAAiB;QACf,mDAAuB;QACzB,+CAAqB;QAChB,kDAA0B;QACvB,wDAA6B;QACrC,+CAAqB;QACpB,iDAAsB;QACjB,2CAA2B;QAC9B,qDAAwB;QAC1B,gDAAsB;QAClB,yDAA0B;QACtB,iEAA8B;QAChC,8DAA4B;QAC/B,wDAAyB;QACJ,qGAA8C;QACxE,6CAAoB;QACP,yEAAiC;QACnC,oEAA+B;QAC5B,6GAAkD;QAC/D,8CAAqB;QAC1B,oCAAgB;GA1BrC,eAAe,CA6E3B","sourcesContent":["import { BaseRuleConfig } from '@webpieces/rules-config';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { CodeValidator, ExecutorResult, RuleRun } from './code-validator';\nimport { RuleReporter } from './rule-reporter';\nimport { WorkspaceRoot, MatchRulesHolder } from './code-rules-context';\nimport { MatchRulesChecker } from './validate-match-rules';\nimport { MaxMethodLinesValidator } from './validate-modified-methods';\nimport { MaxFileLinesValidator } from './validate-modified-files';\nimport { RequireReturnTypeValidator } from './validate-return-types';\nimport { NoInlineTypeLiteralsValidator } from './validate-no-inline-types';\nimport { NoAnyUnknownValidator } from './validate-no-any-unknown';\nimport { NoImplicitAnyValidator } from './validate-no-implicit-any';\nimport { PrismaValidateDtosValidator } from './validate-dtos';\nimport { PrismaConverterValidator } from './validate-prisma-converters';\nimport { NoDestructureValidator } from './validate-no-destructure';\nimport { CatchErrorPatternValidator } from './validate-catch-error-pattern';\nimport { NoUnmanagedExceptionsValidator } from './validate-no-unmanaged-exceptions';\nimport { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver';\nimport { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';\nimport { NoClientCreationOutsideServerOrClientValidator } from './validate-no-client-creation-outside-server-or-client';\nimport { NoCustomCssValidator } from './validate-no-custom-css';\nimport { NoProcessExitOutsideMainValidator } from './validate-no-process-exit-outside-main';\nimport { NoFunctionOutsideClassValidator } from './validate-no-function-outside-class';\nimport { InjectAnnotationNotNeededForConcreteClassValidator } from './validate-inject-annotation-not-needed-for-concrete-class';\nimport { FrameworkTagValidator } from './validate-framework-tag';\nimport { RoleTagValidator } from './validate-role-tag';\n\n/**\n * Owns running the code-rules suite. Every built-in validator is injected as a singleton (its config\n * is bound in the container at bootstrap), so this class IS the code-rules DI DAG the design graph\n * draws. The per-entry match-rules validators are the one exception — they are config-per-instance,\n * so they are built from the injected {@link MatchRulesHolder}.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class CodeRulesEngine {\n    // webpieces-disable max-lines-new-methods -- the built-in validator set is flat; each is one injected field\n    constructor(\n        private readonly workspace: WorkspaceRoot,\n        private readonly reporter: RuleReporter,\n        private readonly matchRules: MatchRulesHolder,\n        private readonly matchChecker: MatchRulesChecker,\n        private readonly maxMethodLines: MaxMethodLinesValidator,\n        private readonly maxFileLines: MaxFileLinesValidator,\n        private readonly requireReturnType: RequireReturnTypeValidator,\n        private readonly noInlineTypeLiterals: NoInlineTypeLiteralsValidator,\n        private readonly noAnyUnknown: NoAnyUnknownValidator,\n        private readonly noImplicitAny: NoImplicitAnyValidator,\n        private readonly prismaValidateDtos: PrismaValidateDtosValidator,\n        private readonly prismaConverter: PrismaConverterValidator,\n        private readonly noDestructure: NoDestructureValidator,\n        private readonly catchErrorPattern: CatchErrorPatternValidator,\n        private readonly noUnmanagedExceptions: NoUnmanagedExceptionsValidator,\n        private readonly noDirectApiResolver: NoDirectApiResolverValidator,\n        private readonly noSymbolDiTokens: NoSymbolDiTokensValidator,\n        private readonly noClientCreationOutsideServerOrClient: NoClientCreationOutsideServerOrClientValidator,\n        private readonly noCustomCss: NoCustomCssValidator,\n        private readonly noProcessExitOutsideMain: NoProcessExitOutsideMainValidator,\n        private readonly noFunctionOutsideClass: NoFunctionOutsideClassValidator,\n        private readonly injectAnnotationNotNeeded: InjectAnnotationNotNeededForConcreteClassValidator,\n        private readonly frameworkTag: FrameworkTagValidator,\n        private readonly roleTag: RoleTagValidator,\n    ) {}\n\n    /** The 20 injected built-in validators, in run order. */\n    private builtIns(): CodeValidator<BaseRuleConfig>[] {\n        return [\n            this.maxMethodLines, this.maxFileLines, this.requireReturnType, this.noInlineTypeLiterals,\n            this.noAnyUnknown, this.noImplicitAny, this.prismaValidateDtos, this.prismaConverter,\n            this.noDestructure, this.catchErrorPattern, this.noUnmanagedExceptions, this.noDirectApiResolver,\n            this.noSymbolDiTokens, this.noClientCreationOutsideServerOrClient, this.noCustomCss,\n            this.noProcessExitOutsideMain, this.noFunctionOutsideClass,\n            this.injectAnnotationNotNeeded, this.frameworkTag, this.roleTag,\n        ];\n    }\n\n    /**\n     * Every ACTIVE run: an injected built-in validator whose `shouldRun()` is true, or an injected\n     * match-rule check per configured entry that is active. Built as {@link RuleRun} value objects\n     * (name + thunk) so NO DAG member is `new`-ed — the validators and the checker are injected.\n     */\n    private activeRuns(root: string): RuleRun[] {\n        const runs: RuleRun[] = [];\n        for (const v of this.builtIns()) {\n            if (v.shouldRun()) runs.push(new RuleRun(v.name, () => v.run(root)));\n        }\n        for (const mr of this.matchRules.rules) {\n            if (this.matchChecker.shouldRun(mr)) runs.push(new RuleRun(mr.name, () => this.matchChecker.runForConfig(mr, root)));\n        }\n        return runs;\n    }\n\n    /**\n     * Run all configured code validators against the workspace. A validator runs only when\n     * `shouldRun()` is true (mode not OFF and no branch/epoch escape hatch). Per-run isolation lives\n     * in {@link RuleReporter} so one validator can never abort the rest.\n     */\n    async run(): Promise<ExecutorResult> {\n        const runs = this.activeRuns(this.workspace.path);\n        if (runs.length === 0) {\n            console.log('\\n⏭️  Skipping all code validations (all modes: OFF)\\n');\n            return { success: true };\n        }\n\n        console.log('\\n📏 Running Code Validations\\n');\n        console.log(`   Active rules: ${runs.map((r: RuleRun) => r.name).join(', ')}`);\n        console.log('');\n\n        const result = await this.reporter.runValidators(runs);\n        console.log(result.success ? '\\n✅ All code validations passed\\n' : '\\n❌ Some code validations failed\\n');\n        return result;\n    }\n}\n"]}
+{"version":3,"file":"code-rules-engine.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/code-rules-engine.ts"],"names":[],"mappings":";;;;AACA,yCAA2D;AAE3D,qDAA0E;AAC1E,mDAA+C;AAC/C,6DAAuE;AACvE,iEAA2D;AAC3D,2EAAsE;AACtE,uEAAkE;AAClE,mEAAqE;AACrE,yEAA2E;AAC3E,uEAAkE;AAClE,yEAAoE;AACpE,mDAA8D;AAC9D,6EAAwE;AACxE,uEAAmE;AACnE,iFAA4E;AAC5E,yFAAoF;AACpF,uFAAiF;AACjF,iFAA2E;AAC3E,iIAAwH;AACxH,qEAAgE;AAChE,iGAA0F;AAC1F,mGAA4F;AAC5F,6FAAuF;AACvF,yIAAgI;AAChI,qEAAiE;AACjE,2DAAuD;AAEvD;;;;;GAKG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAe;IAGH;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IA1BrB,4GAA4G;IAC5G,YACqB,SAAwB,EACxB,QAAsB,EACtB,UAA4B,EAC5B,YAA+B,EAC/B,cAAuC,EACvC,YAAmC,EACnC,iBAA6C,EAC7C,oBAAmD,EACnD,YAAmC,EACnC,aAAqC,EACrC,kBAA+C,EAC/C,eAAyC,EACzC,aAAqC,EACrC,iBAA6C,EAC7C,qBAAqD,EACrD,mBAAiD,EACjD,gBAA2C,EAC3C,qCAAqF,EACrF,WAAiC,EACjC,uBAAyD,EACzD,wBAA2D,EAC3D,sBAAuD,EACvD,yBAA6E,EAC7E,YAAmC,EACnC,OAAyB;QAxBzB,cAAS,GAAT,SAAS,CAAe;QACxB,aAAQ,GAAR,QAAQ,CAAc;QACtB,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAmB;QAC/B,mBAAc,GAAd,cAAc,CAAyB;QACvC,iBAAY,GAAZ,YAAY,CAAuB;QACnC,sBAAiB,GAAjB,iBAAiB,CAA4B;QAC7C,yBAAoB,GAApB,oBAAoB,CAA+B;QACnD,iBAAY,GAAZ,YAAY,CAAuB;QACnC,kBAAa,GAAb,aAAa,CAAwB;QACrC,uBAAkB,GAAlB,kBAAkB,CAA6B;QAC/C,oBAAe,GAAf,eAAe,CAA0B;QACzC,kBAAa,GAAb,aAAa,CAAwB;QACrC,sBAAiB,GAAjB,iBAAiB,CAA4B;QAC7C,0BAAqB,GAArB,qBAAqB,CAAgC;QACrD,wBAAmB,GAAnB,mBAAmB,CAA8B;QACjD,qBAAgB,GAAhB,gBAAgB,CAA2B;QAC3C,0CAAqC,GAArC,qCAAqC,CAAgD;QACrF,gBAAW,GAAX,WAAW,CAAsB;QACjC,4BAAuB,GAAvB,uBAAuB,CAAkC;QACzD,6BAAwB,GAAxB,wBAAwB,CAAmC;QAC3D,2BAAsB,GAAtB,sBAAsB,CAAiC;QACvD,8BAAyB,GAAzB,yBAAyB,CAAoD;QAC7E,iBAAY,GAAZ,YAAY,CAAuB;QACnC,YAAO,GAAP,OAAO,CAAkB;IAC3C,CAAC;IAEJ,yDAAyD;IACjD,QAAQ;QACZ,OAAO;YACH,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB;YACzF,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,eAAe;YACpF,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,mBAAmB;YAChG,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,qCAAqC,EAAE,IAAI,CAAC,WAAW;YACnF,IAAI,CAAC,uBAAuB;YAC5B,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,sBAAsB;YAC1D,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO;SAClE,CAAC;IACN,CAAC;IAED;;;;OAIG;IACK,UAAU,CAAC,IAAY;QAC3B,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,SAAS,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAO,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAO,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACzH,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;QACzG,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AA/EY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAIL,kCAAa;QACd,4BAAY;QACV,qCAAgB;QACd,wCAAiB;QACf,mDAAuB;QACzB,+CAAqB;QAChB,kDAA0B;QACvB,wDAA6B;QACrC,+CAAqB;QACpB,iDAAsB;QACjB,2CAA2B;QAC9B,qDAAwB;QAC1B,gDAAsB;QAClB,yDAA0B;QACtB,iEAA8B;QAChC,8DAA4B;QAC/B,wDAAyB;QACJ,qGAA8C;QACxE,6CAAoB;QACR,uEAAgC;QAC/B,yEAAiC;QACnC,oEAA+B;QAC5B,6GAAkD;QAC/D,8CAAqB;QAC1B,oCAAgB;GA3BrC,eAAe,CA+E3B","sourcesContent":["import { BaseRuleConfig } from '@webpieces/rules-config';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { CodeValidator, ExecutorResult, RuleRun } from './code-validator';\nimport { RuleReporter } from './rule-reporter';\nimport { WorkspaceRoot, MatchRulesHolder } from './code-rules-context';\nimport { MatchRulesChecker } from './validate-match-rules';\nimport { MaxMethodLinesValidator } from './validate-modified-methods';\nimport { MaxFileLinesValidator } from './validate-modified-files';\nimport { RequireReturnTypeValidator } from './validate-return-types';\nimport { NoInlineTypeLiteralsValidator } from './validate-no-inline-types';\nimport { NoAnyUnknownValidator } from './validate-no-any-unknown';\nimport { NoImplicitAnyValidator } from './validate-no-implicit-any';\nimport { PrismaValidateDtosValidator } from './validate-dtos';\nimport { PrismaConverterValidator } from './validate-prisma-converters';\nimport { NoDestructureValidator } from './validate-no-destructure';\nimport { CatchErrorPatternValidator } from './validate-catch-error-pattern';\nimport { NoUnmanagedExceptionsValidator } from './validate-no-unmanaged-exceptions';\nimport { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver';\nimport { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';\nimport { NoClientCreationOutsideServerOrClientValidator } from './validate-no-client-creation-outside-server-or-client';\nimport { NoCustomCssValidator } from './validate-no-custom-css';\nimport { NoStatePathsInTemplatesValidator } from './validate-no-state-paths-in-templates';\nimport { NoProcessExitOutsideMainValidator } from './validate-no-process-exit-outside-main';\nimport { NoFunctionOutsideClassValidator } from './validate-no-function-outside-class';\nimport { InjectAnnotationNotNeededForConcreteClassValidator } from './validate-inject-annotation-not-needed-for-concrete-class';\nimport { FrameworkTagValidator } from './validate-framework-tag';\nimport { RoleTagValidator } from './validate-role-tag';\n\n/**\n * Owns running the code-rules suite. Every built-in validator is injected as a singleton (its config\n * is bound in the container at bootstrap), so this class IS the code-rules DI DAG the design graph\n * draws. The per-entry match-rules validators are the one exception — they are config-per-instance,\n * so they are built from the injected {@link MatchRulesHolder}.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class CodeRulesEngine {\n    // webpieces-disable max-lines-new-methods -- the built-in validator set is flat; each is one injected field\n    constructor(\n        private readonly workspace: WorkspaceRoot,\n        private readonly reporter: RuleReporter,\n        private readonly matchRules: MatchRulesHolder,\n        private readonly matchChecker: MatchRulesChecker,\n        private readonly maxMethodLines: MaxMethodLinesValidator,\n        private readonly maxFileLines: MaxFileLinesValidator,\n        private readonly requireReturnType: RequireReturnTypeValidator,\n        private readonly noInlineTypeLiterals: NoInlineTypeLiteralsValidator,\n        private readonly noAnyUnknown: NoAnyUnknownValidator,\n        private readonly noImplicitAny: NoImplicitAnyValidator,\n        private readonly prismaValidateDtos: PrismaValidateDtosValidator,\n        private readonly prismaConverter: PrismaConverterValidator,\n        private readonly noDestructure: NoDestructureValidator,\n        private readonly catchErrorPattern: CatchErrorPatternValidator,\n        private readonly noUnmanagedExceptions: NoUnmanagedExceptionsValidator,\n        private readonly noDirectApiResolver: NoDirectApiResolverValidator,\n        private readonly noSymbolDiTokens: NoSymbolDiTokensValidator,\n        private readonly noClientCreationOutsideServerOrClient: NoClientCreationOutsideServerOrClientValidator,\n        private readonly noCustomCss: NoCustomCssValidator,\n        private readonly noStatePathsInTemplates: NoStatePathsInTemplatesValidator,\n        private readonly noProcessExitOutsideMain: NoProcessExitOutsideMainValidator,\n        private readonly noFunctionOutsideClass: NoFunctionOutsideClassValidator,\n        private readonly injectAnnotationNotNeeded: InjectAnnotationNotNeededForConcreteClassValidator,\n        private readonly frameworkTag: FrameworkTagValidator,\n        private readonly roleTag: RoleTagValidator,\n    ) {}\n\n    /** The 21 injected built-in validators, in run order. */\n    private builtIns(): CodeValidator<BaseRuleConfig>[] {\n        return [\n            this.maxMethodLines, this.maxFileLines, this.requireReturnType, this.noInlineTypeLiterals,\n            this.noAnyUnknown, this.noImplicitAny, this.prismaValidateDtos, this.prismaConverter,\n            this.noDestructure, this.catchErrorPattern, this.noUnmanagedExceptions, this.noDirectApiResolver,\n            this.noSymbolDiTokens, this.noClientCreationOutsideServerOrClient, this.noCustomCss,\n            this.noStatePathsInTemplates,\n            this.noProcessExitOutsideMain, this.noFunctionOutsideClass,\n            this.injectAnnotationNotNeeded, this.frameworkTag, this.roleTag,\n        ];\n    }\n\n    /**\n     * Every ACTIVE run: an injected built-in validator whose `shouldRun()` is true, or an injected\n     * match-rule check per configured entry that is active. Built as {@link RuleRun} value objects\n     * (name + thunk) so NO DAG member is `new`-ed — the validators and the checker are injected.\n     */\n    private activeRuns(root: string): RuleRun[] {\n        const runs: RuleRun[] = [];\n        for (const v of this.builtIns()) {\n            if (v.shouldRun()) runs.push(new RuleRun(v.name, () => v.run(root)));\n        }\n        for (const mr of this.matchRules.rules) {\n            if (this.matchChecker.shouldRun(mr)) runs.push(new RuleRun(mr.name, () => this.matchChecker.runForConfig(mr, root)));\n        }\n        return runs;\n    }\n\n    /**\n     * Run all configured code validators against the workspace. A validator runs only when\n     * `shouldRun()` is true (mode not OFF and no branch/epoch escape hatch). Per-run isolation lives\n     * in {@link RuleReporter} so one validator can never abort the rest.\n     */\n    async run(): Promise<ExecutorResult> {\n        const runs = this.activeRuns(this.workspace.path);\n        if (runs.length === 0) {\n            console.log('\\n⏭️  Skipping all code validations (all modes: OFF)\\n');\n            return { success: true };\n        }\n\n        console.log('\\n📏 Running Code Validations\\n');\n        console.log(`   Active rules: ${runs.map((r: RuleRun) => r.name).join(', ')}`);\n        console.log('');\n\n        const result = await this.reporter.runValidators(runs);\n        console.log(result.success ? '\\n✅ All code validations passed\\n' : '\\n❌ Some code validations failed\\n');\n        return result;\n    }\n}\n"]}

package/src/index.d.ts

@@ -12,6 +12,7 @@ export { NoDestructureValidator } from './validate-no-destructure';
 export { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver';
 export { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';
 export { NoClientCreationOutsideServerOrClientValidator } from './validate-no-client-creation-outside-server-or-client';
+export { NoStatePathsInTemplatesValidator, StatePathHit, StatePathViolation } from './validate-no-state-paths-in-templates';
 export { ProjectRoleResolver } from './project-role-resolver';
 export { NoProcessExitOutsideMainValidator } from './validate-no-process-exit-outside-main';
 export { NoFunctionOutsideClassValidator } from './validate-no-function-outside-class';

package/src/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateCode = exports.PrismaConverterValidator = exports.PrismaValidateDtosValidator = exports.RoleTagValidator = exports.FrameworkTagValidator = exports.findRedundantInjectInSource = exports.InjectAnnotationNotNeededForConcreteClassValidator = exports.NoFunctionOutsideClassValidator = exports.NoProcessExitOutsideMainValidator = exports.ProjectRoleResolver = exports.NoClientCreationOutsideServerOrClientValidator = exports.NoSymbolDiTokensValidator = exports.NoDirectApiResolverValidator = exports.NoDestructureValidator = exports.NoUnmanagedExceptionsValidator = exports.CatchErrorPatternValidator = exports.NoInlineTypeLiteralsValidator = exports.RequireReturnTypeValidator = exports.MaxFileLinesValidator = exports.runNewMethods = exports.runModifiedMethods = exports.MaxMethodLinesValidator = exports.NoImplicitAnyValidator = exports.NoAnyUnknownValidator = exports.CodeValidator = void 0;
+exports.validateCode = exports.PrismaConverterValidator = exports.PrismaValidateDtosValidator = exports.RoleTagValidator = exports.FrameworkTagValidator = exports.findRedundantInjectInSource = exports.InjectAnnotationNotNeededForConcreteClassValidator = exports.NoFunctionOutsideClassValidator = exports.NoProcessExitOutsideMainValidator = exports.ProjectRoleResolver = exports.StatePathViolation = exports.StatePathHit = exports.NoStatePathsInTemplatesValidator = exports.NoClientCreationOutsideServerOrClientValidator = exports.NoSymbolDiTokensValidator = exports.NoDirectApiResolverValidator = exports.NoDestructureValidator = exports.NoUnmanagedExceptionsValidator = exports.CatchErrorPatternValidator = exports.NoInlineTypeLiteralsValidator = exports.RequireReturnTypeValidator = exports.MaxFileLinesValidator = exports.runNewMethods = exports.runModifiedMethods = exports.MaxMethodLinesValidator = exports.NoImplicitAnyValidator = exports.NoAnyUnknownValidator = exports.CodeValidator = void 0;
 const tslib_1 = require("tslib");
 var code_validator_1 = require("./code-validator");
 Object.defineProperty(exports, "CodeValidator", { enumerable: true, get: function () { return code_validator_1.CodeValidator; } });
@@ -31,6 +31,10 @@ var validate_no_symbol_di_tokens_1 = require("./validate-no-symbol-di-tokens");
 Object.defineProperty(exports, "NoSymbolDiTokensValidator", { enumerable: true, get: function () { return validate_no_symbol_di_tokens_1.NoSymbolDiTokensValidator; } });
 var validate_no_client_creation_outside_server_or_client_1 = require("./validate-no-client-creation-outside-server-or-client");
 Object.defineProperty(exports, "NoClientCreationOutsideServerOrClientValidator", { enumerable: true, get: function () { return validate_no_client_creation_outside_server_or_client_1.NoClientCreationOutsideServerOrClientValidator; } });
+var validate_no_state_paths_in_templates_1 = require("./validate-no-state-paths-in-templates");
+Object.defineProperty(exports, "NoStatePathsInTemplatesValidator", { enumerable: true, get: function () { return validate_no_state_paths_in_templates_1.NoStatePathsInTemplatesValidator; } });
+Object.defineProperty(exports, "StatePathHit", { enumerable: true, get: function () { return validate_no_state_paths_in_templates_1.StatePathHit; } });
+Object.defineProperty(exports, "StatePathViolation", { enumerable: true, get: function () { return validate_no_state_paths_in_templates_1.StatePathViolation; } });
 var project_role_resolver_1 = require("./project-role-resolver");
 Object.defineProperty(exports, "ProjectRoleResolver", { enumerable: true, get: function () { return project_role_resolver_1.ProjectRoleResolver; } });
 var validate_no_process_exit_outside_main_1 = require("./validate-no-process-exit-outside-main");

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/index.ts"],"names":[],"mappings":";;;;AAAA,mDAAiE;AAAxD,+GAAA,aAAa,OAAA;AAEtB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,uEAAoE;AAA3D,kIAAA,sBAAsB,OAAA;AAC/B,yEAA0F;AAAjF,oIAAA,uBAAuB,OAAA;AAAE,+HAAA,kBAAkB,OAAA;AACpD,+DAAuD;AAA9C,qHAAA,aAAa,OAAA;AACtB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,iEAAqE;AAA5D,mIAAA,0BAA0B,OAAA;AACnC,uEAA2E;AAAlE,yIAAA,6BAA6B,OAAA;AACtC,+EAA4E;AAAnE,0IAAA,0BAA0B,OAAA;AACnC,uFAAoF;AAA3E,kJAAA,8BAA8B,OAAA;AACvC,qEAAmE;AAA1D,iIAAA,sBAAsB,OAAA;AAC/B,qFAAiF;AAAxE,+IAAA,4BAA4B,OAAA;AACrC,+EAA2E;AAAlE,yIAAA,yBAAyB,OAAA;AAClC,+HAAwH;AAA/G,sLAAA,8CAA8C,OAAA;AACvD,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iGAA4F;AAAnF,0JAAA,iCAAiC,OAAA;AAC1C,2FAAuF;AAA9E,qJAAA,+BAA+B,OAAA;AACxC,uIAA6J;AAApJ,8LAAA,kDAAkD,OAAA;AAAE,uKAAA,2BAA2B,OAAA;AACxF,mEAAiE;AAAxD,+HAAA,qBAAqB,OAAA;AAC9B,yDAAuD;AAA9C,qHAAA,gBAAgB,OAAA;AACzB,iDAA8D;AAArD,4HAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,iDAA0D;AAAjD,sIAAA,OAAO,OAAgB","sourcesContent":["export { CodeValidator, ExecutorResult } from './code-validator';\n\nexport { NoAnyUnknownValidator } from './validate-no-any-unknown';\nexport { NoImplicitAnyValidator } from './validate-no-implicit-any';\nexport { MaxMethodLinesValidator, runModifiedMethods } from './validate-modified-methods';\nexport { runNewMethods } from './validate-new-methods';\nexport { MaxFileLinesValidator } from './validate-modified-files';\nexport { RequireReturnTypeValidator } from './validate-return-types';\nexport { NoInlineTypeLiteralsValidator } from './validate-no-inline-types';\nexport { CatchErrorPatternValidator } from './validate-catch-error-pattern';\nexport { NoUnmanagedExceptionsValidator } from './validate-no-unmanaged-exceptions';\nexport { NoDestructureValidator } from './validate-no-destructure';\nexport { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver';\nexport { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';\nexport { NoClientCreationOutsideServerOrClientValidator } from './validate-no-client-creation-outside-server-or-client';\nexport { ProjectRoleResolver } from './project-role-resolver';\nexport { NoProcessExitOutsideMainValidator } from './validate-no-process-exit-outside-main';\nexport { NoFunctionOutsideClassValidator } from './validate-no-function-outside-class';\nexport { InjectAnnotationNotNeededForConcreteClassValidator, findRedundantInjectInSource } from './validate-inject-annotation-not-needed-for-concrete-class';\nexport { FrameworkTagValidator } from './validate-framework-tag';\nexport { RoleTagValidator } from './validate-role-tag';\nexport { PrismaValidateDtosValidator } from './validate-dtos';\nexport { PrismaConverterValidator } from './validate-prisma-converters';\nexport { default as validateCode } from './validate-code';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/index.ts"],"names":[],"mappings":";;;;AAAA,mDAAiE;AAAxD,+GAAA,aAAa,OAAA;AAEtB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,uEAAoE;AAA3D,kIAAA,sBAAsB,OAAA;AAC/B,yEAA0F;AAAjF,oIAAA,uBAAuB,OAAA;AAAE,+HAAA,kBAAkB,OAAA;AACpD,+DAAuD;AAA9C,qHAAA,aAAa,OAAA;AACtB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,iEAAqE;AAA5D,mIAAA,0BAA0B,OAAA;AACnC,uEAA2E;AAAlE,yIAAA,6BAA6B,OAAA;AACtC,+EAA4E;AAAnE,0IAAA,0BAA0B,OAAA;AACnC,uFAAoF;AAA3E,kJAAA,8BAA8B,OAAA;AACvC,qEAAmE;AAA1D,iIAAA,sBAAsB,OAAA;AAC/B,qFAAiF;AAAxE,+IAAA,4BAA4B,OAAA;AACrC,+EAA2E;AAAlE,yIAAA,yBAAyB,OAAA;AAClC,+HAAwH;AAA/G,sLAAA,8CAA8C,OAAA;AACvD,+FAA4H;AAAnH,wJAAA,gCAAgC,OAAA;AAAE,oIAAA,YAAY,OAAA;AAAE,0IAAA,kBAAkB,OAAA;AAC3E,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iGAA4F;AAAnF,0JAAA,iCAAiC,OAAA;AAC1C,2FAAuF;AAA9E,qJAAA,+BAA+B,OAAA;AACxC,uIAA6J;AAApJ,8LAAA,kDAAkD,OAAA;AAAE,uKAAA,2BAA2B,OAAA;AACxF,mEAAiE;AAAxD,+HAAA,qBAAqB,OAAA;AAC9B,yDAAuD;AAA9C,qHAAA,gBAAgB,OAAA;AACzB,iDAA8D;AAArD,4HAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,iDAA0D;AAAjD,sIAAA,OAAO,OAAgB","sourcesContent":["export { CodeValidator, ExecutorResult } from './code-validator';\n\nexport { NoAnyUnknownValidator } from './validate-no-any-unknown';\nexport { NoImplicitAnyValidator } from './validate-no-implicit-any';\nexport { MaxMethodLinesValidator, runModifiedMethods } from './validate-modified-methods';\nexport { runNewMethods } from './validate-new-methods';\nexport { MaxFileLinesValidator } from './validate-modified-files';\nexport { RequireReturnTypeValidator } from './validate-return-types';\nexport { NoInlineTypeLiteralsValidator } from './validate-no-inline-types';\nexport { CatchErrorPatternValidator } from './validate-catch-error-pattern';\nexport { NoUnmanagedExceptionsValidator } from './validate-no-unmanaged-exceptions';\nexport { NoDestructureValidator } from './validate-no-destructure';\nexport { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver';\nexport { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';\nexport { NoClientCreationOutsideServerOrClientValidator } from './validate-no-client-creation-outside-server-or-client';\nexport { NoStatePathsInTemplatesValidator, StatePathHit, StatePathViolation } from './validate-no-state-paths-in-templates';\nexport { ProjectRoleResolver } from './project-role-resolver';\nexport { NoProcessExitOutsideMainValidator } from './validate-no-process-exit-outside-main';\nexport { NoFunctionOutsideClassValidator } from './validate-no-function-outside-class';\nexport { InjectAnnotationNotNeededForConcreteClassValidator, findRedundantInjectInSource } from './validate-inject-annotation-not-needed-for-concrete-class';\nexport { FrameworkTagValidator } from './validate-framework-tag';\nexport { RoleTagValidator } from './validate-role-tag';\nexport { PrismaValidateDtosValidator } from './validate-dtos';\nexport { PrismaConverterValidator } from './validate-prisma-converters';\nexport { default as validateCode } from './validate-code';\n"]}

package/src/validate-no-state-paths-in-templates.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Validate No State Paths In Templates
+ *
+ * FAILS when a GENERATED-doc template restates a webpieces state path (`.webpieces/…`) as a literal
+ * instead of rendering it from the resolver that already computes it.
+ *
+ * ## The incident this exists for
+ *
+ * `webpieces.git-workflow.md` — an AI-instruction doc regenerated into `.webpieces/instruct-ai/` of
+ * every governed repo on every `wp-*` command — carried the literal
+ * `.webpieces/logs/branch-mutations.log`. That log is deliberately PER-WORKTREE (one appender each):
+ *
+ *   primary clone   → `<primary>/.webpieces/logs/branch-mutations.log`
+ *   linked worktree → `<primary>/.webpieces/worktrees/<name>/logs/branch-mutations.log`
+ *
+ * So in a linked worktree the doc named a file that DOES NOT EXIST. The reader greps nothing, and the
+ * silence reads as "no deletions were logged" — the opposite of the truth, from the one file whose
+ * entire job is to prove every deletion is recoverable.
+ *
+ * The cure is not "fix that line". Every one of these paths already has a resolver, and the template
+ * engine already substitutes (`{{MERGE_DIR}}`, `{{RUN_STATE}}`, `{{BRANCH_MUTATION_LOG}}` …). This
+ * rule makes RESTATING the thing that fails and RENDERING the thing that passes, so the next one
+ * cannot land.
+ *
+ * ## Scope
+ *
+ * `templateDirs` (workspace-relative dirs, recursive, `.md` only) — default
+ * `packages/tooling/rules-config/templates`. A repo that generates no AI docs matches no files and the
+ * rule is a no-op. Deliberately NOT widened to `backlog/**` (frozen records of past requests — editing
+ * them falsifies the record) or to hand-written docs that name a FILE rather than a path.
+ *
+ * MODES: OFF | NEW_AND_MODIFIED_CODE (changed lines only) | NEW_AND_MODIFIED_FILES (whole changed file).
+ * Diff-scoped by default, so the docs whose SUBJECT is the layout (they print both rows on purpose)
+ * are not retroactively flooded — the rule bites when a template is next edited.
+ *
+ * ESCAPE HATCH (this table IS the layout, and printing it is the point):
+ *   <!-- webpieces-disable no-state-paths-in-templates -- <reason> -->
+ *
+ * `~/.webpieces/…` is NOT a violation: the machine-local tier has no per-tree resolver and no
+ * per-tree answer, so the literal is the correct and only spelling of it.
+ */
+import { NoStatePathsInTemplatesConfig } from '@webpieces/rules-config';
+import { CodeValidator, ExecutorResult } from './code-validator';
+/** One restated state path, located in a template. */
+export declare class StatePathViolation {
+    readonly file: string;
+    readonly line: number;
+    readonly column: number;
+    readonly detail: string;
+    constructor(file: string, line: number, column: number, detail: string);
+}
+/** One restated state path within a single file, plus whether its line carries a disable. */
+export declare class StatePathHit {
+    readonly line: number;
+    readonly column: number;
+    readonly detail: string;
+    readonly hasDisableComment: boolean;
+    constructor(line: number, column: number, detail: string, hasDisableComment: boolean);
+}
+export declare class NoStatePathsInTemplatesValidator extends CodeValidator<NoStatePathsInTemplatesConfig> {
+    constructor(config: NoStatePathsInTemplatesConfig);
+    run(workspaceRoot: string): Promise<ExecutorResult>;
+    /**
+     * The ONE spelling of "this validator failed": a thrown {@link RuleFailError} carrying its cures as
+     * `Option[]`, which {@link RuleReporter} catches and renders.
+     *
+     * NOT `console.error` + `{ success: false }`. That pair is a second spelling of the same fact (see
+     * RuleReporter.runValidators, which calls it a back-compat shim scheduled for deletion), and
+     * hand-written "To fix: … / Escape hatch: …" prose is a second spelling of `Option[]` — the
+     * framework owns the `Fix Option N:` numbering and the `(preferred)` tag, so a rule never writes them.
+     */
+    private failure;
+    /**
+     * A changed file this rule looks at: a `.md` under one of the configured template dirs.
+     *
+     * The ONE place the file set is narrowed, so both modes run over the same list and a scope change
+     * cannot be applied in one and forgotten in the other.
+     */
+    isRelevantFile(file: string): boolean;
+    /** Every restated state path in `text`, one hit per line (the first match on that line). */
+    findHits(text: string): StatePathHit[];
+    /**
+     * Where `prefix` is restated in `raw`, or -1.
+     *
+     * `~/.webpieces/…` is skipped: the machine-local tier is the same absolute path from every tree, so
+     * there is no resolver to call and the literal is the only spelling there is. Everything else —
+     * including the bare relative form that started this — is a restatement of a per-tree path.
+     */
+    private columnOf;
+    /** NEW_AND_MODIFIED_CODE: only hits whose line is in the diff hunks. */
+    private violationsForModifiedCode;
+    /** NEW_AND_MODIFIED_FILES: every hit in any changed template. */
+    private violationsForModifiedFiles;
+    private hitsForFile;
+    private templateDirs;
+    private bannedPrefixes;
+    /** True if a `webpieces-disable no-state-paths-in-templates` sits on this line or up to 3 above. */
+    private hasDisableComment;
+    private resolveMode;
+}

package/src/validate-no-state-paths-in-templates.js

@@ -0,0 +1,259 @@
+"use strict";
+/**
+ * Validate No State Paths In Templates
+ *
+ * FAILS when a GENERATED-doc template restates a webpieces state path (`.webpieces/…`) as a literal
+ * instead of rendering it from the resolver that already computes it.
+ *
+ * ## The incident this exists for
+ *
+ * `webpieces.git-workflow.md` — an AI-instruction doc regenerated into `.webpieces/instruct-ai/` of
+ * every governed repo on every `wp-*` command — carried the literal
+ * `.webpieces/logs/branch-mutations.log`. That log is deliberately PER-WORKTREE (one appender each):
+ *
+ *   primary clone   → `<primary>/.webpieces/logs/branch-mutations.log`
+ *   linked worktree → `<primary>/.webpieces/worktrees/<name>/logs/branch-mutations.log`
+ *
+ * So in a linked worktree the doc named a file that DOES NOT EXIST. The reader greps nothing, and the
+ * silence reads as "no deletions were logged" — the opposite of the truth, from the one file whose
+ * entire job is to prove every deletion is recoverable.
+ *
+ * The cure is not "fix that line". Every one of these paths already has a resolver, and the template
+ * engine already substitutes (`{{MERGE_DIR}}`, `{{RUN_STATE}}`, `{{BRANCH_MUTATION_LOG}}` …). This
+ * rule makes RESTATING the thing that fails and RENDERING the thing that passes, so the next one
+ * cannot land.
+ *
+ * ## Scope
+ *
+ * `templateDirs` (workspace-relative dirs, recursive, `.md` only) — default
+ * `packages/tooling/rules-config/templates`. A repo that generates no AI docs matches no files and the
+ * rule is a no-op. Deliberately NOT widened to `backlog/**` (frozen records of past requests — editing
+ * them falsifies the record) or to hand-written docs that name a FILE rather than a path.
+ *
+ * MODES: OFF | NEW_AND_MODIFIED_CODE (changed lines only) | NEW_AND_MODIFIED_FILES (whole changed file).
+ * Diff-scoped by default, so the docs whose SUBJECT is the layout (they print both rows on purpose)
+ * are not retroactively flooded — the rule bites when a template is next edited.
+ *
+ * ESCAPE HATCH (this table IS the layout, and printing it is the point):
+ *   <!-- webpieces-disable no-state-paths-in-templates -- <reason> -->
+ *
+ * `~/.webpieces/…` is NOT a violation: the machine-local tier has no per-tree resolver and no
+ * per-tree answer, so the literal is the correct and only spelling of it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoStatePathsInTemplatesValidator = exports.StatePathHit = exports.StatePathViolation = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+const rules_config_1 = require("@webpieces/rules-config");
+const inversify_1 = require("inversify");
+const code_validator_1 = require("./code-validator");
+const resolve_mode_1 = require("./resolve-mode");
+/** One restated state path, located in a template. */
+class StatePathViolation {
+    file;
+    line;
+    column;
+    detail;
+    constructor(file, line, column, detail) {
+        this.file = file;
+        this.line = line;
+        this.column = column;
+        this.detail = detail;
+    }
+}
+exports.StatePathViolation = StatePathViolation;
+/** One restated state path within a single file, plus whether its line carries a disable. */
+class StatePathHit {
+    line;
+    column;
+    detail;
+    hasDisableComment;
+    constructor(line, column, detail, hasDisableComment) {
+        this.line = line;
+        this.column = column;
+        this.detail = detail;
+        this.hasDisableComment = hasDisableComment;
+    }
+}
+exports.StatePathHit = StatePathHit;
+let NoStatePathsInTemplatesValidator = class NoStatePathsInTemplatesValidator extends code_validator_1.CodeValidator {
+    constructor(config) {
+        super(config, rules_config_1.RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES, rules_config_1.RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES);
+    }
+    async run(workspaceRoot) {
+        const opts = this.config;
+        const mode = this.resolveMode(opts.mode ?? 'NEW_AND_MODIFIED_CODE', opts.turnOffRuleUntilEpoch, opts.turnOffRuleWhileOnBranch ?? undefined);
+        const disableAllowed = opts.disableAllowed ?? true;
+        if (mode === 'OFF') {
+            console.log('\n⏭️  Skipping no-state-paths-in-templates validation (mode: OFF)\n');
+            return { success: true };
+        }
+        console.log('\n📏 Validating No State Paths In Templates\n');
+        console.log(`   Mode: ${mode}`);
+        let base = process.env['NX_BASE'];
+        const head = process.env['NX_HEAD'];
+        if (base === undefined || base === '') {
+            base = (0, rules_config_1.detectBase)(workspaceRoot) ?? undefined;
+            if (base === undefined || base === '') {
+                console.log('\n⏭️  Skipping no-state-paths-in-templates validation (could not detect base branch)\n');
+                return { success: true };
+            }
+        }
+        console.log(`   Base: ${base}`);
+        console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}\n`);
+        const changedFiles = (0, rules_config_1.getChangedFiles)(workspaceRoot, base, head, { tsOnly: false })
+            .filter((file) => this.isRelevantFile(file));
+        if (changedFiles.length === 0) {
+            console.log('✅ No generated-doc templates changed');
+            return { success: true };
+        }
+        console.log(`📂 Checking ${String(changedFiles.length)} changed template(s)...`);
+        const violations = mode === 'NEW_AND_MODIFIED_CODE'
+            ? this.violationsForModifiedCode(workspaceRoot, changedFiles, base, head, disableAllowed)
+            : this.violationsForModifiedFiles(workspaceRoot, changedFiles, disableAllowed);
+        if (violations.length === 0) {
+            console.log('✅ No hard-coded state paths in generated-doc templates');
+            return { success: true };
+        }
+        throw this.failure(violations, mode);
+    }
+    /**
+     * The ONE spelling of "this validator failed": a thrown {@link RuleFailError} carrying its cures as
+     * `Option[]`, which {@link RuleReporter} catches and renders.
+     *
+     * NOT `console.error` + `{ success: false }`. That pair is a second spelling of the same fact (see
+     * RuleReporter.runValidators, which calls it a back-compat shim scheduled for deletion), and
+     * hand-written "To fix: … / Escape hatch: …" prose is a second spelling of `Option[]` — the
+     * framework owns the `Fix Option N:` numbering and the `(preferred)` tag, so a rule never writes them.
+     */
+    failure(violations, mode) {
+        const detail = violations.map((violation) => `  ${violation.file}:${String(violation.line)}:${String(violation.column)} restates \`${violation.detail}…\``)
+            .join('\n');
+        const first = violations[0];
+        return new rules_config_1.RuleFailError(rules_config_1.RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES, 'A generated-doc template RESTATES a webpieces state path instead of computing it. These docs are '
+            + 'regenerated into every governed repo and handed to an agent by absolute path AS INSTRUCTION, and '
+            + 'every .webpieces/ path is per-tree — a linked worktree keeps its state under '
+            + `<primary>/.webpieces/worktrees/<name>/ — so the relative spelling names a file that DOES NOT EXIST `
+            + `in half the trees that read it. Current mode: ${mode}.\n${detail}`, first?.line, first?.detail, [
+            new rules_config_1.Option('Put a {{PLACEHOLDER}} in the template and render it from the resolver that already computes '
+                + 'that path, the way {{BRANCH_MUTATION_LOG}} is rendered from '
+                + 'BranchMutationLog.branchMutationLogPath(root) in GitWorkflowDoc.render', true),
+            new rules_config_1.Option('If the doc\'s SUBJECT is the layout and printing the literal is the point, say so out loud:\n'
+                + '<!-- webpieces-disable no-state-paths-in-templates -- <reason> -->'),
+        ]);
+    }
+    /**
+     * A changed file this rule looks at: a `.md` under one of the configured template dirs.
+     *
+     * The ONE place the file set is narrowed, so both modes run over the same list and a scope change
+     * cannot be applied in one and forgotten in the other.
+     */
+    isRelevantFile(file) {
+        const norm = file.replace(/\\/g, '/');
+        if (!norm.endsWith('.md'))
+            return false;
+        return this.templateDirs().some((dir) => norm.startsWith(`${dir}/`));
+    }
+    /** Every restated state path in `text`, one hit per line (the first match on that line). */
+    findHits(text) {
+        const lines = text.split('\n');
+        const hits = [];
+        for (let i = 0; i < lines.length; i++) {
+            const raw = lines[i] ?? '';
+            for (const prefix of this.bannedPrefixes()) {
+                const column = this.columnOf(raw, prefix);
+                if (column < 0)
+                    continue;
+                hits.push(new StatePathHit(i + 1, column + 1, prefix, this.hasDisableComment(lines, i + 1)));
+                break;
+            }
+        }
+        return hits;
+    }
+    /**
+     * Where `prefix` is restated in `raw`, or -1.
+     *
+     * `~/.webpieces/…` is skipped: the machine-local tier is the same absolute path from every tree, so
+     * there is no resolver to call and the literal is the only spelling there is. Everything else —
+     * including the bare relative form that started this — is a restatement of a per-tree path.
+     */
+    columnOf(raw, prefix) {
+        let from = 0;
+        for (;;) {
+            const at = raw.indexOf(prefix, from);
+            if (at < 0)
+                return -1;
+            if (raw.slice(Math.max(0, at - 2), at) !== '~/')
+                return at;
+            from = at + 1;
+        }
+    }
+    /** NEW_AND_MODIFIED_CODE: only hits whose line is in the diff hunks. */
+    violationsForModifiedCode(workspaceRoot, changedFiles, base, head, disableAllowed) {
+        const violations = [];
+        for (const file of changedFiles) {
+            const changedLines = (0, rules_config_1.getChangedLineNumbers)((0, rules_config_1.getFileDiff)(workspaceRoot, file, base, head));
+            if (changedLines.size === 0)
+                continue;
+            for (const hit of this.hitsForFile(file, workspaceRoot)) {
+                if (disableAllowed && hit.hasDisableComment)
+                    continue;
+                if (!changedLines.has(hit.line))
+                    continue;
+                violations.push(new StatePathViolation(file, hit.line, hit.column, hit.detail));
+            }
+        }
+        return violations;
+    }
+    /** NEW_AND_MODIFIED_FILES: every hit in any changed template. */
+    violationsForModifiedFiles(workspaceRoot, changedFiles, disableAllowed) {
+        const violations = [];
+        for (const file of changedFiles) {
+            for (const hit of this.hitsForFile(file, workspaceRoot)) {
+                if (disableAllowed && hit.hasDisableComment)
+                    continue;
+                violations.push(new StatePathViolation(file, hit.line, hit.column, hit.detail));
+            }
+        }
+        return violations;
+    }
+    hitsForFile(file, workspaceRoot) {
+        const fullPath = path.join(workspaceRoot, file);
+        if (!fs.existsSync(fullPath))
+            return [];
+        return this.findHits(fs.readFileSync(fullPath, 'utf-8'));
+    }
+    templateDirs() {
+        const dirs = this.config.templateDirs ?? rules_config_1.DEFAULT_TEMPLATE_DIRS;
+        return dirs.map((dir) => dir.replace(/\\/g, '/').replace(/\/+$/, ''));
+    }
+    bannedPrefixes() {
+        return this.config.bannedPathPrefixes ?? rules_config_1.DEFAULT_BANNED_STATE_PATH_PREFIXES;
+    }
+    /** True if a `webpieces-disable no-state-paths-in-templates` sits on this line or up to 3 above. */
+    hasDisableComment(lines, lineNumber) {
+        const start = Math.max(0, lineNumber - 4);
+        for (let i = lineNumber - 1; i >= start; i--) {
+            if ((0, rules_config_1.hasDisable)(lines[i] ?? '', rules_config_1.RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES))
+                return true;
+        }
+        return false;
+    }
+    resolveMode(normalMode, epoch, branchPattern) {
+        if (normalMode === 'OFF')
+            return normalMode;
+        const skip = (0, resolve_mode_1.shouldSkipRule)(epoch, branchPattern);
+        if (skip.skip) {
+            console.log(`\n⏭️  Skipping no-state-paths-in-templates validation (${skip.reason})\n`);
+            return 'OFF';
+        }
+        return normalMode;
+    }
+};
+exports.NoStatePathsInTemplatesValidator = NoStatePathsInTemplatesValidator;
+exports.NoStatePathsInTemplatesValidator = NoStatePathsInTemplatesValidator = tslib_1.__decorate([
+    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton),
+    tslib_1.__metadata("design:paramtypes", [rules_config_1.NoStatePathsInTemplatesConfig])
+], NoStatePathsInTemplatesValidator);
+//# sourceMappingURL=validate-no-state-paths-in-templates.js.map

package/src/validate-no-state-paths-in-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-no-state-paths-in-templates.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/validate-no-state-paths-in-templates.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;;;;AAEH,+CAAyB;AACzB,mDAA6B;AAC7B,0DAaiC;AACjC,yCAA2D;AAE3D,qDAAiE;AACjE,iDAAgD;AAEhD,sDAAsD;AACtD,MAAa,kBAAkB;IAEd;IACA;IACA;IACA;IAJb,YACa,IAAY,EACZ,IAAY,EACZ,MAAc,EACd,MAAc;QAHd,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IACxB,CAAC;CACP;AAPD,gDAOC;AAED,6FAA6F;AAC7F,MAAa,YAAY;IAER;IACA;IACA;IACA;IAJb,YACa,IAAY,EACZ,MAAc,EACd,MAAc,EACd,iBAA0B;QAH1B,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,sBAAiB,GAAjB,iBAAiB,CAAS;IACpC,CAAC;CACP;AAPD,oCAOC;AAGM,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,8BAA4C;IAC9F,YAAY,MAAqC;QAC7C,KAAK,CAAC,MAAM,EAAE,yBAAU,CAAC,2BAA2B,EAAE,yBAAU,CAAC,2BAA2B,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,aAAqB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CACzB,IAAI,CAAC,IAAI,IAAI,uBAAuB,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,IAAI,SAAS,CAAC,CAAC;QAClH,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAEhC,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,IAAA,yBAAU,EAAC,aAAa,CAAC,IAAI,SAAS,CAAC;YAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,wFAAwF,CAAC,CAAC;gBACtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC7B,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,6CAA6C,IAAI,CAAC,CAAC;QAEnF,MAAM,YAAY,GAAG,IAAA,8BAAe,EAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aAC7E,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAEjF,MAAM,UAAU,GAAG,IAAI,KAAK,uBAAuB;YAC/C,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;YACzF,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,aAAa,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAEnF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;OAQG;IACK,OAAO,CAAC,UAAgC,EAAE,IAAsB;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAA6B,EAAU,EAAE,CACpE,KAAK,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,SAAS,CAAC,MAAM,KAAK,CAAC;aAC7G,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,4BAAa,CACpB,yBAAU,CAAC,2BAA2B,EACtC,mGAAmG;cACjG,mGAAmG;cACnG,+EAA+E;cAC/E,qGAAqG;cACrG,iDAAiD,IAAI,MAAM,MAAM,EAAE,EACrE,KAAK,EAAE,IAAI,EACX,KAAK,EAAE,MAAM,EACb;YACI,IAAI,qBAAM,CACN,8FAA8F;kBAC5F,8DAA8D;kBAC9D,wEAAwE,EAC1E,IAAI,CAAC;YACT,IAAI,qBAAM,CACN,+FAA+F;kBAC7F,oEAAoE,CAAC;SAC9E,CACJ,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,GAAW,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,4FAA4F;IAC5F,QAAQ,CAAC,IAAY;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAmB,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC1C,IAAI,MAAM,GAAG,CAAC;oBAAE,SAAS;gBACzB,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7F,MAAM;YACV,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CAAC,GAAW,EAAE,MAAc;QACxC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,SAAS,CAAC;YACN,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC;YAC3D,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;QAClB,CAAC;IACL,CAAC;IAED,wEAAwE;IAChE,yBAAyB,CAC7B,aAAqB,EACrB,YAAsB,EACtB,IAAY,EACZ,IAAwB,EACxB,cAAuB;QAEvB,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,IAAA,oCAAqB,EAAC,IAAA,0BAAW,EAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACzF,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;gBAAE,SAAS;YACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;gBACtD,IAAI,cAAc,IAAI,GAAG,CAAC,iBAAiB;oBAAE,SAAS;gBACtD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC1C,UAAU,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACpF,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,iEAAiE;IACzD,0BAA0B,CAC9B,aAAqB,EACrB,YAAsB,EACtB,cAAuB;QAEvB,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;gBACtD,IAAI,cAAc,IAAI,GAAG,CAAC,iBAAiB;oBAAE,SAAS;gBACtD,UAAU,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACpF,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;IAEO,WAAW,CAAC,IAAY,EAAE,aAAqB;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,YAAY;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,oCAAqB,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAEO,cAAc;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,iDAAkC,CAAC;IAChF,CAAC;IAED,oGAAoG;IAC5F,iBAAiB,CAAC,KAAe,EAAE,UAAkB;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,IAAA,yBAAU,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,yBAAU,CAAC,2BAA2B,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxF,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,WAAW,CACf,UAA4B,EAC5B,KAAyB,EACzB,aAAiC;QAEjC,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,UAAU,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,0DAA0D,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;YACxF,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;CACJ,CAAA;AA5MY,4EAAgC;2CAAhC,gCAAgC;IAD5C,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAEjB,4CAA6B;GADxC,gCAAgC,CA4M5C","sourcesContent":["/**\n * Validate No State Paths In Templates\n *\n * FAILS when a GENERATED-doc template restates a webpieces state path (`.webpieces/…`) as a literal\n * instead of rendering it from the resolver that already computes it.\n *\n * ## The incident this exists for\n *\n * `webpieces.git-workflow.md` — an AI-instruction doc regenerated into `.webpieces/instruct-ai/` of\n * every governed repo on every `wp-*` command — carried the literal\n * `.webpieces/logs/branch-mutations.log`. That log is deliberately PER-WORKTREE (one appender each):\n *\n *   primary clone   → `<primary>/.webpieces/logs/branch-mutations.log`\n *   linked worktree → `<primary>/.webpieces/worktrees/<name>/logs/branch-mutations.log`\n *\n * So in a linked worktree the doc named a file that DOES NOT EXIST. The reader greps nothing, and the\n * silence reads as \"no deletions were logged\" — the opposite of the truth, from the one file whose\n * entire job is to prove every deletion is recoverable.\n *\n * The cure is not \"fix that line\". Every one of these paths already has a resolver, and the template\n * engine already substitutes (`{{MERGE_DIR}}`, `{{RUN_STATE}}`, `{{BRANCH_MUTATION_LOG}}` …). This\n * rule makes RESTATING the thing that fails and RENDERING the thing that passes, so the next one\n * cannot land.\n *\n * ## Scope\n *\n * `templateDirs` (workspace-relative dirs, recursive, `.md` only) — default\n * `packages/tooling/rules-config/templates`. A repo that generates no AI docs matches no files and the\n * rule is a no-op. Deliberately NOT widened to `backlog/**` (frozen records of past requests — editing\n * them falsifies the record) or to hand-written docs that name a FILE rather than a path.\n *\n * MODES: OFF | NEW_AND_MODIFIED_CODE (changed lines only) | NEW_AND_MODIFIED_FILES (whole changed file).\n * Diff-scoped by default, so the docs whose SUBJECT is the layout (they print both rows on purpose)\n * are not retroactively flooded — the rule bites when a template is next edited.\n *\n * ESCAPE HATCH (this table IS the layout, and printing it is the point):\n *   <!-- webpieces-disable no-state-paths-in-templates -- <reason> -->\n *\n * `~/.webpieces/…` is NOT a violation: the machine-local tier has no per-tree resolver and no\n * per-tree answer, so the literal is the correct and only spelling of it.\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport {\n    hasDisable,\n    RULE_NAMES,\n    NoStatePathsInTemplatesConfig,\n    Option,\n    RuleFailError,\n    DEFAULT_TEMPLATE_DIRS,\n    DEFAULT_BANNED_STATE_PATH_PREFIXES,\n    ModifiedCodeMode,\n    detectBase,\n    getChangedFiles,\n    getFileDiff,\n    getChangedLineNumbers,\n} from '@webpieces/rules-config';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { CodeValidator, ExecutorResult } from './code-validator';\nimport { shouldSkipRule } from './resolve-mode';\n\n/** One restated state path, located in a template. */\nexport class StatePathViolation {\n    constructor(\n        readonly file: string,\n        readonly line: number,\n        readonly column: number,\n        readonly detail: string,\n    ) {}\n}\n\n/** One restated state path within a single file, plus whether its line carries a disable. */\nexport class StatePathHit {\n    constructor(\n        readonly line: number,\n        readonly column: number,\n        readonly detail: string,\n        readonly hasDisableComment: boolean,\n    ) {}\n}\n\n@injectable(bindingScopeValues.Singleton)\nexport class NoStatePathsInTemplatesValidator extends CodeValidator<NoStatePathsInTemplatesConfig> {\n    constructor(config: NoStatePathsInTemplatesConfig) {\n        super(config, RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES, RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES);\n    }\n\n    async run(workspaceRoot: string): Promise<ExecutorResult> {\n        const opts = this.config;\n        const mode = this.resolveMode(\n            opts.mode ?? 'NEW_AND_MODIFIED_CODE', opts.turnOffRuleUntilEpoch, opts.turnOffRuleWhileOnBranch ?? undefined);\n        const disableAllowed = opts.disableAllowed ?? true;\n        if (mode === 'OFF') {\n            console.log('\\n⏭️  Skipping no-state-paths-in-templates validation (mode: OFF)\\n');\n            return { success: true };\n        }\n\n        console.log('\\n📏 Validating No State Paths In Templates\\n');\n        console.log(`   Mode: ${mode}`);\n\n        let base = process.env['NX_BASE'];\n        const head = process.env['NX_HEAD'];\n        if (base === undefined || base === '') {\n            base = detectBase(workspaceRoot) ?? undefined;\n            if (base === undefined || base === '') {\n                console.log('\\n⏭️  Skipping no-state-paths-in-templates validation (could not detect base branch)\\n');\n                return { success: true };\n            }\n        }\n        console.log(`   Base: ${base}`);\n        console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}\\n`);\n\n        const changedFiles = getChangedFiles(workspaceRoot, base, head, { tsOnly: false })\n            .filter((file: string): boolean => this.isRelevantFile(file));\n        if (changedFiles.length === 0) {\n            console.log('✅ No generated-doc templates changed');\n            return { success: true };\n        }\n        console.log(`📂 Checking ${String(changedFiles.length)} changed template(s)...`);\n\n        const violations = mode === 'NEW_AND_MODIFIED_CODE'\n            ? this.violationsForModifiedCode(workspaceRoot, changedFiles, base, head, disableAllowed)\n            : this.violationsForModifiedFiles(workspaceRoot, changedFiles, disableAllowed);\n\n        if (violations.length === 0) {\n            console.log('✅ No hard-coded state paths in generated-doc templates');\n            return { success: true };\n        }\n        throw this.failure(violations, mode);\n    }\n\n    /**\n     * The ONE spelling of \"this validator failed\": a thrown {@link RuleFailError} carrying its cures as\n     * `Option[]`, which {@link RuleReporter} catches and renders.\n     *\n     * NOT `console.error` + `{ success: false }`. That pair is a second spelling of the same fact (see\n     * RuleReporter.runValidators, which calls it a back-compat shim scheduled for deletion), and\n     * hand-written \"To fix: … / Escape hatch: …\" prose is a second spelling of `Option[]` — the\n     * framework owns the `Fix Option N:` numbering and the `(preferred)` tag, so a rule never writes them.\n     */\n    private failure(violations: StatePathViolation[], mode: ModifiedCodeMode): RuleFailError {\n        const detail = violations.map((violation: StatePathViolation): string =>\n            `  ${violation.file}:${String(violation.line)}:${String(violation.column)} restates \\`${violation.detail}…\\``)\n            .join('\\n');\n        const first = violations[0];\n        return new RuleFailError(\n            RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES,\n            'A generated-doc template RESTATES a webpieces state path instead of computing it. These docs are '\n            + 'regenerated into every governed repo and handed to an agent by absolute path AS INSTRUCTION, and '\n            + 'every .webpieces/ path is per-tree — a linked worktree keeps its state under '\n            + `<primary>/.webpieces/worktrees/<name>/ — so the relative spelling names a file that DOES NOT EXIST `\n            + `in half the trees that read it. Current mode: ${mode}.\\n${detail}`,\n            first?.line,\n            first?.detail,\n            [\n                new Option(\n                    'Put a {{PLACEHOLDER}} in the template and render it from the resolver that already computes '\n                    + 'that path, the way {{BRANCH_MUTATION_LOG}} is rendered from '\n                    + 'BranchMutationLog.branchMutationLogPath(root) in GitWorkflowDoc.render',\n                    true),\n                new Option(\n                    'If the doc\\'s SUBJECT is the layout and printing the literal is the point, say so out loud:\\n'\n                    + '<!-- webpieces-disable no-state-paths-in-templates -- <reason> -->'),\n            ],\n        );\n    }\n\n    /**\n     * A changed file this rule looks at: a `.md` under one of the configured template dirs.\n     *\n     * The ONE place the file set is narrowed, so both modes run over the same list and a scope change\n     * cannot be applied in one and forgotten in the other.\n     */\n    isRelevantFile(file: string): boolean {\n        const norm = file.replace(/\\\\/g, '/');\n        if (!norm.endsWith('.md')) return false;\n        return this.templateDirs().some((dir: string): boolean => norm.startsWith(`${dir}/`));\n    }\n\n    /** Every restated state path in `text`, one hit per line (the first match on that line). */\n    findHits(text: string): StatePathHit[] {\n        const lines = text.split('\\n');\n        const hits: StatePathHit[] = [];\n        for (let i = 0; i < lines.length; i++) {\n            const raw = lines[i] ?? '';\n            for (const prefix of this.bannedPrefixes()) {\n                const column = this.columnOf(raw, prefix);\n                if (column < 0) continue;\n                hits.push(new StatePathHit(i + 1, column + 1, prefix, this.hasDisableComment(lines, i + 1)));\n                break;\n            }\n        }\n        return hits;\n    }\n\n    /**\n     * Where `prefix` is restated in `raw`, or -1.\n     *\n     * `~/.webpieces/…` is skipped: the machine-local tier is the same absolute path from every tree, so\n     * there is no resolver to call and the literal is the only spelling there is. Everything else —\n     * including the bare relative form that started this — is a restatement of a per-tree path.\n     */\n    private columnOf(raw: string, prefix: string): number {\n        let from = 0;\n        for (;;) {\n            const at = raw.indexOf(prefix, from);\n            if (at < 0) return -1;\n            if (raw.slice(Math.max(0, at - 2), at) !== '~/') return at;\n            from = at + 1;\n        }\n    }\n\n    /** NEW_AND_MODIFIED_CODE: only hits whose line is in the diff hunks. */\n    private violationsForModifiedCode(\n        workspaceRoot: string,\n        changedFiles: string[],\n        base: string,\n        head: string | undefined,\n        disableAllowed: boolean,\n    ): StatePathViolation[] {\n        const violations: StatePathViolation[] = [];\n        for (const file of changedFiles) {\n            const changedLines = getChangedLineNumbers(getFileDiff(workspaceRoot, file, base, head));\n            if (changedLines.size === 0) continue;\n            for (const hit of this.hitsForFile(file, workspaceRoot)) {\n                if (disableAllowed && hit.hasDisableComment) continue;\n                if (!changedLines.has(hit.line)) continue;\n                violations.push(new StatePathViolation(file, hit.line, hit.column, hit.detail));\n            }\n        }\n        return violations;\n    }\n\n    /** NEW_AND_MODIFIED_FILES: every hit in any changed template. */\n    private violationsForModifiedFiles(\n        workspaceRoot: string,\n        changedFiles: string[],\n        disableAllowed: boolean,\n    ): StatePathViolation[] {\n        const violations: StatePathViolation[] = [];\n        for (const file of changedFiles) {\n            for (const hit of this.hitsForFile(file, workspaceRoot)) {\n                if (disableAllowed && hit.hasDisableComment) continue;\n                violations.push(new StatePathViolation(file, hit.line, hit.column, hit.detail));\n            }\n        }\n        return violations;\n    }\n\n    private hitsForFile(file: string, workspaceRoot: string): StatePathHit[] {\n        const fullPath = path.join(workspaceRoot, file);\n        if (!fs.existsSync(fullPath)) return [];\n        return this.findHits(fs.readFileSync(fullPath, 'utf-8'));\n    }\n\n    private templateDirs(): readonly string[] {\n        const dirs = this.config.templateDirs ?? DEFAULT_TEMPLATE_DIRS;\n        return dirs.map((dir: string): string => dir.replace(/\\\\/g, '/').replace(/\\/+$/, ''));\n    }\n\n    private bannedPrefixes(): readonly string[] {\n        return this.config.bannedPathPrefixes ?? DEFAULT_BANNED_STATE_PATH_PREFIXES;\n    }\n\n    /** True if a `webpieces-disable no-state-paths-in-templates` sits on this line or up to 3 above. */\n    private hasDisableComment(lines: string[], lineNumber: number): boolean {\n        const start = Math.max(0, lineNumber - 4);\n        for (let i = lineNumber - 1; i >= start; i--) {\n            if (hasDisable(lines[i] ?? '', RULE_NAMES.NO_STATE_PATHS_IN_TEMPLATES)) return true;\n        }\n        return false;\n    }\n\n    private resolveMode(\n        normalMode: ModifiedCodeMode,\n        epoch: number | undefined,\n        branchPattern: string | undefined,\n    ): ModifiedCodeMode {\n        if (normalMode === 'OFF') return normalMode;\n        const skip = shouldSkipRule(epoch, branchPattern);\n        if (skip.skip) {\n            console.log(`\\n⏭️  Skipping no-state-paths-in-templates validation (${skip.reason})\\n`);\n            return 'OFF';\n        }\n        return normalMode;\n    }\n}\n"]}